Splunk Search

How to chance color of the row based on field name

saravana22
Explorer

Hi experts,

i have below table.. how do i change background colour of the row where error Categories = Total_error_rate

Error_categories                       Percentage%
error_rate_Error                        0.1138498
error_rate_Warning                 0.0011737
error_rate_Critical                   0.0000000
error_rate_HTTP                       6.5950704
Total_error_rate                        6.7100939

 

Thank you 🙂

Labels (1)
0 Karma

somesoni2
Revered Legend
0 Karma

saravana22
Explorer

its not worked for me...  i want color the entire row where field value = Total_error_rate

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

The technique @somesoni2  pointed you too works for the entire row assuming you have listed your fields correctly on the foreach command (although you could use * to get them all too). A wrinkle might be that you may need to put the <<FIELD>> in quotes (double for left of assignments and single for right of assignments) if your field names are other than simple words. Please can you post what you have done which is not working for you?

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...